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Abstract 

We investigate the two-level, multi-partite quantum states with their non-injective reduced den- 
sity matrices. As pointed out by Walck and Lyon, the undetermined states are stabilizer states j^]. 
From this viewpoint, we firstly discuss the connections between the codewords of stabilizer quan- 
tum error correction codes and the undetermined states. Using these connections, some novel sets 
of undetermined states are found. Then we discuss the usefulness of undeterminedness property on 
quantum cryptography. In particular, we modify the quantum secret sharing scheme proposed by 
Hillery et. al. 7|. The security is proved using the undeterminedness of the Greenberger-Horne- 
Zeilinger (GHZ) states. Finally, the undetermined mixed states are also studied. 
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Quantum entanglement has been regarded as an useful physical resource in quantum 
information and quantum computation. Wherein, different non-local correlations embed- 
ded in entanglement are employed for different tasks. It is very important to quantify and 
characterize quantum entanglement in quantum information science. In the last decade, 
a lot of measures in various aspects of research purposes have been proposed An in- 
teresting approach is to measure information contained in the reduced density matrix of a 
given state. More specifically, for an arbitrary two-level multi-party entangled state, it is 
concerned whether the partial or low-ordered correlations of the reduced matrices can fully 
reveal the high-ordered correlations. If the answer is positive, these entangled states, either 
pure or mixed, can be completely determined by their parts. Surprisingly, as originally 
indicated by Linden et. ai, almost every pure three-qubit entangled state can be entirely 
determined by its two-qubit reduced density matrices [2]. Diosi illustrated the explicit so- 
lution of constructing the three-party pure state using any two two-qubit reduced density 
matrices [4J. Furthermore, Linden and Wootters showed that a fraction of quantum parti- 
cles of almost n-party multi-level pure entangled states can reveal as much information as 
that of all particles [31]. However, the question of precisely characterizing which states are 
determined by their reduced density matrices remained open. 

On the other hand, we are interested in characterizing which states are undetermined by 
their reduced density matrices. We will show that these undetermined states are proven 
to be extremely useful in quantum cryptography. Recently, Walck and Lyons showed that 
the generalized n-qubit Greenberger-Horne-Zeilinger (GHZ) states and their local unitary 
equivalents are the only states that are not uniquely determined among pure states by their 
reduced density matrices of n — 1 qubits {{J. In this letter, we generalize the work of Q], 
and construct more undetermined states using the stabilizer quantum error-correcting codes 
(SQECCs). Furthermore, we demonstrate several applications of these undetermined states 
in quantum cryptography. 

We say that two n-qubit pure states | V^o) and \4>i) are ^-undetermined, or unconditionally 
.D-undetermined, if their reduced density matrices of the remaining (n — D)-qubit of |V>o) 
and are always the same after tracing out any arbitrary D qubits. We can modify the 
claim in [5| as follows. 

Claim: If |?/>o) and are D-undetermined, then for arbitrary .D-qubit set (i\,i2, • • • ,io), 
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there is a unitary U hi2 ... iD such that = U hi2 ...i D \ip )- 

proof: Let sd = {M2 • • - id}, and let p SD denote the D-qubit reduced density matrix of \ipo). 
Using the spectral decomposition, we can write p SD as 

2 D -1 
£=0 

for some orthonormal basis \£), where {p e SD } are eigenvalues of p SD . 
From the Schmit decomposition, we can write 

2 D -1 
1=0 

where {]£)} are (n — D)-qubit eigenvectors, and constitute a 2 D -dimensional subspace of the 
2™ -i:, -dimensional Hilbert space. Furthermore, the remaining (n — -D)-qubit reduced density 
matrix p SD of \ip Q ) is 

2 D -l 

p-s D = Y,Ps D m- 

£=0 

Since the reduced density matrix of j^i) when tracing out ii, i 2 , ■ ■ ■ ,id qubits is the same 
as p SD , we can express j^i) as 

2 D -1 
£=0 

where {]£)} are the orthonormal basis of the 2 D -dimensional Hilbert space. 

We can now relate the two set of orthonormal basis {|^)} and {|^)} by a unitary Ui 1 i 2 ...i D , 
such that 

\£) — Ui x i 2 ...i D \£) , 

for all I. Notice that U ili2 ... iD cannot be decomposed as tensor products comprising any 
single-qubit identity operator. It follows directly that 

l^i) = U ili2 ... iD \ip ). 

This concludes the proof. 

Notice that if we have repeated eigenvalues, the above proof also holds. However, in this 
case, we have freedom of choosing different unitary matrices. 
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In addition, for two arbitrary D-qubit sets i 2 , • • • , id) and (i'i,i' 2 , • • • , i'd), there must 
exist some .D-qubit unitary matrices Ui 1 i 2 ...i D and U^...^, such that j^i) = £/j 1 i 2 ..< D |'0o) and 
|-0i> = Ui^.i^o). As a result, 

That is, j^o) and l^i) both are stabilizer states. An interesting perspective is to regard \ipo) 
and l^i) as logic states, or codewords, of an [[n, l,d}] stabilizer quantum error-correcting 
code. In this way, U ili2 ... iD and U^...^ each correspond to the logic bit-flip operators. 

To be more specific, for the logic states |-0 O ) and l^i) of an [[n, l,d}} stabilizer code, the 
corresponding density matrices are 

= \A) (A\ = \(i + (-1)^)11 ® \^ + 9i), * e {0, 1}- (i) 

Wherein, Z is logic a z operator, and g±, g 2 , • ■ • , g n -i are generators of the stabilizer group 
S with its normalizer denoted by Af. Note that there is some degree of freedom for choosing 
logic a x operator, denoted by X. Let the operator X satisfy the condition 

X G M/S and {X, Z} = 0. 

We can also choose any of XS or X as X. Here we define the set of all legitimate X 
operators as X, where 

X = {X\X G N/S and {X, Z} = 0}. 

By definition, given an [[n, 1, d]] SQECC, there must exist at least one <i-qubit undetected 
error £ ili2 ... id = (S^ ® £ i2 <S> ■ ■ • <S> £i d ), where £j is a non-identity Pauli operator on qubit i, 
such that £ ili2 ...i d \ip ) = \ipi)- Obviously, £ ili2 ... id G X . However, in order for j^o) and j^i) 
to be D-undetermined states, the following stronger condition is required: for arbitrary D 
qubits «2, • • • ,iD, there must be at least an undetected error operator £ ili2 ... iD G X. It 
follows that the parameters D and d are not necessarily equal, and D is at least as large as 
d (D > d). 

It is not trivial that given an [[n, l,d]] SQECC, there always exists some D > d such 
that its codewords are D-undetermined states. However, we can provide simple necessary 
condition as follows. Let E D be the number of operators in X whose weight is D. The 
condition, E D > = D \^L D y > is a necessary condition for an [[n, l,dj] SQECC such that 
its codewords are D-undetermined states. 
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Notice that, the unitary Ui 1 i 2 ...i D used to define .D-undetermined states is, in general, an 
arbitrary D-qubit unitary matrix in SU(2) 13 . It is very difficult to construct the undeter- 
mined states based on this definition. However, as long as for each unitary Ui 1 i 2 ...i D , there 
exists an error operator £ ili2 ... iD that lies in the support of Ui 1 i 2 ...i D and belongs to the set 
of legitimate logic a x operators, X, we can always map the undetermined states into the 
codewords of some [[n, l,d\] SQECC. 

Before introducing new sets of undetermined states, we first show how to recover the result 
of using the idea of SQECCs. Let |^ > and be ±(\0f n + \lf n ) and ^(|O) 0n -|l) 0n ), 
respectively. Let gi = ZiZi+i, i G {1, 2, • • • , n — 1} and Z can be set as X® n . It is noteworthy 
that such an [[n, 1, 1]] stabilizer code can correct all the single bit-flip errors, but not single 
qubit phase-flip errors. Obviously, Zi G H and {Z iy Z} = 0. In other words, Zi G X, Vz. 
Therefore, these two states and are 1-undetermined states. Furthermore, any pure 
state spanned by |^ ) an d l^i) is also 1-undetermined state. In other words, the code space 
of the [[n, 1, 1]] SQECC contains the set of 1-undetermined states. 

This example demonstrates the power of the stabilizer formalism. We can see that the 
undetermined states are the stabilizer states of some [[n, 1, d]] SQECCs; however, the dis- 
tance d is not important here. What we care about is the set of logic ax operators of the 
SQECC. 

Now we introduce some novel sets of the undetermined states. Firstly, we consider the 
[[4, 1,2]] stabilizer quantum error correction code with the following generators g\ = Y1Y3, 
92 = Y2Y4, and g% = Z1Z2Z3Z4. If we pick Z = Y1X2Z4, then it is easy to verify that 

Vi^2; Y2Y3, I3Y4, Y4Y1, Z1Z3, X2X4} G X. 

As a result, the two-qubit reduced density of the logic states \ipo) and \ipi) are always the 
same. 

I — I 

Another set comprises the logic states of the [[5, 1, 3]] SQECC [9], where the correspond- 
ing <7, and Z are <! K~ x {X\Z2Zj > XiJ.^) and Z1Z2Z3Z4Z5, respectively (91 is the right-shift 
operator). Interestingly, we have 

{Y2Y3X5+ cyclic terms, XiZ 2 Z 5 + cyclic terms } G X. 

Therefore, they are 3-undetermined states, and undetermined by their 2-qubit reduced den- 
sity matrices. Inspired by the [[5, 1,3]] code, we consider the following n-qubit cyclic stabi- 
lizer states. Wherein, the corresponding density matrices p, t are defined as Eq. (JTJ with the 
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gi and Z are y?-\x® p Z® 2p X® p I® q ) and Z mp+q , respectively. Note that n = Ap + q and 
q = n mod 4. By brute-force search, for 7 < n < 15, we find that when arbitrary n — 2 
qubits are traced out, the reduced density matrices are undetermined. 

We can weaken the unconditionally undetermined condition as follows. Two states are 
called conditionally //-undetermined states, if when some particular set of D' qubits are 
traced out, the reduced density matrices are undetermined. This particular set corresponds 



to the unauthorized set first mentioned in 



Obviously, the minimal D' is d if these 



two conditionally undetermined states are logic states of some SQECCs. Actually, it is 
obvious that d < D' < D. As a concrete example, we consider the [[7, 1, 3]] Steane code 101 ]. 
where the six stabilizers are X^X^X^Xq, X^X^X^X-j , X1X3X5X7, Z3Z4Z5Z5, 
Z1Z3Z5Z7, and Z = ZiZ 2 Z 3 Z4Z 5 Z 6 Z 7 . It is easy to see that j^o) an d l^i) are conditionally 
3-undetermined states since Tr^^dV'oX'^ol) 7^ Tr (234) ( | ^1 X^i I ) • By further check, these two 
logic states become unconditionally 5- undetermined if arbitrary five qubits are traced out. 

Applications: In the following, we will show that the undetermined states have several 
important applications in quantum cryptography. First, the undetermined states can be used 
to prove the impossibility of the unconditional security of quantum bit commitment 6j. In 
brief, the dishonest sender initially prepares the singlet state, \B)i 2 = ^(|01)i2 — 1 10)12) - In 
the sealing phase, s/he keeps the qubit 1 and seals the qubit 2 into the black box, which is 
delivered to the honest receiver. Notably, the states |_B) 12 and (U ®J) \B) 12 are undetermined 
by their single-qubit density matrices, where U and I are the single qubit operation and 
2x2 identity matrix, respectively. That is, the honest receiver is never aware of any single 
qubit operation on qubit 1. Nevertheless, the dishonest sender can perform the single qubit 
operation U on the qubit 1 to access the full information via the anti-perfect correlation of 
the singlet state. 

Second, the q ea„ tum S ee ret sharing (OSS, sehe.e proposed by Hd lery e, at. Q is proven 
insecure by Qin et. al. very recently 8j. Here we demonstrate that the undetermined 
states can save the security of the QSS scheme. Here we brief the original QSS scheme 
as follows. In the distribution phase, the sender Alice always initially prepares the same 
three-qubit GHZ states, ^jdO) 03 + |1) 03 ) in each round. Then she sends two of these 
three qubits to each the receivers, Bob and Charlie. Afterwards, all three parties perform 
either a y or a x measurement at random. The receivers each send the measurement basis to 
Alice. On the other hand, Alice performs her measurement. Here the secret bit is Alice's 
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measurement outcome. In the revealing phase, Alice announces her measurement basis. If 
either one or three a x measurements are preformed among these three parties, they keep 
their respective outcomes, otherwise these outcomes are discarded. As for the reserved 
outcomes, Bob and Charlie have to collaborate to deduce Alice' outcome. To achieve this, 
they just reveal their respective outcomes to each other in private. At last, in order to detect 
the eavesdropping in the checking phase, some portion of the outcomes should be chosen 
randomly and then announced public. If the bit error rate is beyond some threshold, there 
must exist eavesdropping and hence the secret bits should be abandoned. 

To access the secret without other's assistance, the dishonest receiver, say Charlie, in- 
tercepts the delivered qubits and perform joint operations on the these two qubits with one 
ancilla qubit. He then resends one of the intercepted qubit to Bob. In the revealing phase, 
the dishonest Charlie can forge his measurement basis before the actual measurement. In 
addition, he wiretaps Bob's measurement basis. Finally, after Alice's announcement, Charlie 
himself can deduce Alice's outcome by performing the joint measurement on qubits at hand 
without Bob's assistance jsj]. 

The essential weakness of the original protocol lies in the changeless state prepared in 
the distribution phase. To rescue its security, the QSS protocol can be modified as follows. 
In the preparation phase of each round, one of the logic states of [[3, 1, 1]] stabilizer code, 
which are |^ ) = 7f(|0)® 3 + |1>® 3 ) and |V>i) = 7f(|O) 03 - |1> 03 ), are initially prepared 
with equal probability. Then two qubits of the prepared three-qubit state are sent to the 
receivers. In the revealing phase, Alice announces which state is prepared after she ensures 
that Bob and Charlie have exchanged their measurement outcomes. The proof of security 
is analogue to the impossibility of the secure quantum bit commitment as addressed above 
6|. Essentially, the two-qubit density matrices of the states \ipo) and \ipx) are always the 
same. Since these two GHZ states with the same two-qubit density matrices are randomly 
distributed, the undetermined states can prevent an eavesdropper from gaining any infor- 
mation. Therefore, even with ancilla qubits, it is impossible for the dishonest Charlie to 
perform any operation on intercepted qubits to discriminate between the states l^o) an d 
In this condition, any forge can be regarded as random guess, which can be detected 
at the checking phase with half probability. Therefore, the modified quantum secret sharing 
scheme is unconditionally secure. 

Furthermore, the modified QSS scheme can generalized as follows. Let the honest sender 
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distributes at most n — D qubits of any of the n-qubit D-undetermined entangled states 
to m receivers. As a result, even intercepting all delivered qubits, any dishonest receiver 
cannot determine which states are distributed. Using the protocol similar to the above 
modified protocol, the correlation embedded in quantum entanglement can exploited for 
secret sharing. 

Third, the D-undetermined states provide unconditional security for a quantum ((n — 
D + 1, n)) threshold scheme if such scheme exists 11] . A quantum ((k, n)) threshold scheme 
has n shares, of which any k shares are sufficient to reconstruct the secret, while any set 
of k — 1 or fewer shares has no information about the secret. This can be easily verified 
because that the reduced density matrix of any set of parties less than or equal to D is the 
same. Furthermore, the conditionally //-undetermined states from some SQECC provide 
us a trivial way of determining the unauthorized sets (therefore its quantum access structure 
[ill ]) when we use the codewords of this SQECC in the quantum secret sharing protocol. 

Discussion: Now we demonstrate how to construct undetermined mixed states. The 
simplest way is to consider n-qubit D-undetermined pure states l^o) and with D larger 
than 1. For some D' < D, we consider the two mixed states p' Q and p[, where p' Q = 
r ixn-i D ,{\^) (V'ol) and p[ = tr ili2 ... iD ,(\^i) (-01 1 ) - As a result, it is easy to verify that p' and 
p\ are /^''-undetermined with D" = D — D'. 

On the other hand, we conjecture the existence of the undetermined mixed states from 
another different approach. Here we consider the [[n, 2, d]] codes with the logic states \ij), 
i ,j G {0, 1}. The corresponding density matrices are 

1 _ 1 _ n " 2 1 

where Z\ and Z 2 each are logic a z operators. In addition, denote the set = {Xj| X{ G M 
and {Xi, Zi} = 0}, i G {1,2} , and M the normalizer of the stabilizer group generated by 
gx, g 2 ,---, g n -2- Now, define the density matrices of two mixed states 

p = ^(|00> <00| + |TT> <TT|), 



and 



pi = i(|io)(io| + |oi)(oi|). 



2 

If the mixed states po and p\ are D-undetermined, by definition, for arbitrary D qubits i%, 
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^2, • • • , *d, there must be an undetected error £ ili2 ...i D , such that 

Oixii-i D £ ^12 = X\U X2 — Xi- 

As a trivial example, we consider the [[4, 2, 2]] code. Wherein, g\ = Y1Y2Y3Y4, #2 = 
Z1Z2Z3Z4, Z\ = Z2Z3 and Z2 = Z\Z2- It is easy to find that 

Z1X2Y3, Z2X3Y4, X1Z3Y4, X1Z2Y4 E X\2- 

Notably, here 2 = d ^ D = 3. 

In conclusion, we investigate the two-level undetermined, either pure or mixed, states. 
Wherein, the connections with the codewords of the stabilizer quantum error correction 
codes are explored. Via these connections, some new sets of undetermined states are discov- 
ered. The potential applications of undetermineness are also discussed. Nevertheless, the 
generalized multi-level undetermined states are still open questions for further studies. 
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